Authors - Yasmany Prieto, Christopher Moyano Abstract - Communication systems are shifting toward more software-based development, driven by technologies such as Software-defined Networking and Network Function Virtualization. This new paradigm improves flexibility, scalability, and resource efficiency, shortens time-to-market, but opens a new dimension of system failure through bugs, backdoors, and software vulnerabilities. In this work, we build a Decision Tree (DT) classifier to predict vulnerability exploitability in networking systems. A list of vulnerabilities affecting those systems is obtained from the National Vulnerability Database. To measure exploitability, we employ the Cybersecurity and Infrastructure Security Agency Known Exploited Vulnerabilities Catalog, which lists vulnerabilities that have been exploited in the wild. The DT classifier achieved a recall of 0.878 in detecting exploitable vulnerabilities.
Open Zoom